66 matches found
FiddleZAP
FiddleZAP FiddleZAP는 OWASP ZAP용 EKFiddle의 간소화된 버전입니다. ZAP을 웹 프록시로 사용하면 미리 정의된 정규 표현식을 기반으로 악성 트래픽을 플래그할 수 있습니다. 예: 손상된 웹사이트의 HTML 소스 코드 내에서 정규 표현식이 문자열과 일치할 때 알림, 강조 표시 및 태깅 설치 ZAP 다운로드 및 설치: https://www.zaproxy.org/download/ FiddleZAP 디렉토리를 Documents 폴더에 다운로드하거나 클론합니다. 다음과 같은 구조여야 합니다: 2개의 스크립트가...
zaproxy
The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...
seccubus
About Seccubus Seccubus automates regular vulnerability scans with various tools and aids security people in the fast analysis of its output, both on the first scan and on repeated scans. On repeated scan delta reporting ensures that findings only need to be judged when they first appear in the...
adapt
Краткое описание ADAPT — это инструмент, выполняющий автоматизированное динамическое тестирование безопасности веб-приложений Dynamic Application Penetration Testing. Он предназначен для повышения точности, скорости и уверенности в процессе тестирования на проникновение. ADAPT автоматически...
adapt
Summary ADAPT is a tool that performs Automated Dynamic Application Penetration Testing for web applications. It is designed to increase accuracy, speed, and confidence in penetration testing efforts. ADAPT automatically tests for multiple industry standard OWASP Top 10 vulnerabilities, and outpu...
DVWA-ZAP-PENTEST
Оценка уязвимостей DVWA с помощью OWASP ZAP Практическая оценка безопасности веб-приложения DVWA Damn Vulnerable Web App , выполненная с использованием OWASP ZAP Zed Attack Proxy 2.17.0. В этом проекте задокументирован полный рабочий процесс: разведка spidering, автоматическое сканирование...
Open-Worldwide-Application-Security-Project-OWASP-
Открытый-Всемирный-Проект-Безопасности-Приложений-OWASP- Автоматизированная оценка уязвимостей веб-приложений DVWA с помощью OWASP ZAP для выявления и анализа критических недостатков безопасности, таких как удаленное выполнение кода CVE-2012-1823...
HUNT
HUNT Suite プロキシ拡張機能 HUNT Suite とは? HUNT Suite は、Burp Suite Pro/Free および OWASP ZAP 拡張機能のコレクションです。 特定の脆弱性クラスに対して脆弱な一般的なパラメータを特定します Burp Suite Pro および OWASP ZAP。 テスト方法論を整理します Burp Suite Pro および Free。 HUNT パラメータスキャナ - 脆弱性クラス SQLインジェクション ローカル/リモートファイルインクルージョン & パストラバーサル サーバーサイドリクエストフォージェリ & オープンリダイレクト...
zap-hud
ZAP Heads Up Display The HUD is no longer under active development Unfortunately the HUD is no longer under active development due to the fact no one is focusing on it. The HUD is a unique and innovative interface that we know some people love. But it also needs a non trivial amount of maintenanc...
purpleteam-s2-containers
purpleteam Контейнеры второго этапа Контейнеры второго этапа purpleteam Эти контейнеры запускаются динамически на основе входных данных конфигурации Build User Job, передаваемых в CLI purpleteam, а именно количества определённых вами testSession. Следующие конфигурации актуальны, если вы...
web-threat-mitigation
web-threat-mitigation Лабораторная работа по обнаружению и смягчению угроз веб-приложений с использованием OWASP ZAP, Burp Suite и ModSecurity WAF с OWASP CRS. Пример: Spring4Shell CVE-2022-22965. Локальная настройка на базе Docker. Лабораторная работа по смягчению веб-угроз – OWASP ZAP,...
ssh-audit
ssh-audit ssh-audit is a tool for ssh server & client configuration auditing. jtesta/ssh-audit v2.0+ is the updated and maintained version of ssh-audit forked from arthepsy/ssh-audit v1.x due to inactivity. Features Usage Screenshots Server Standard Audit Example Server Policy Audit Example Clien...
CVE-2026-57301
Jenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins controller rather than the assigned agent, allowing attackers with Item/Configure permission to execute arbitrary code on the Jenkins controller...
CVE-2026-57301
Jenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins controller rather than the assigned agent, allowing attackers with Item/Configure permission to execute arbitrary code on the Jenkins controller...
CVE-2026-57301
Jenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins controller rather than the assigned agent, allowing attackers with Item/Configure permission to execute arbitrary code on the Jenkins controller...
web-app-security-owasp-zap
🔐 Web Application Security Testing with OWASP ZAP Author:...
EUVD-2022-3026
Malicious code in bioql PyPI...
CVE-2019-1003060
Jenkins Official OWASP ZAP Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...